The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec . - CVE-2022-42328: Guests could trigger denial of service via the netback driver . - CVE-2022-42329: Guests could trigger denial of service via the netback driver . - CVE-2022-3643: Guests could trigger NIC interface reset/abort/crash via netback driver . - CVE-2022-3635: Fixed a use-after-free in the tst_timer of the file drivers/atm/idt77252.c . - CVE-2022-41850: Fixed a race condition in roccat_report_event in drivers/hid/hid-roccat.c . - CVE-2022-45934: Fixed a integer wraparound via L2CAP_CONF_REQ packets in l2cap_config_req in net/bluetooth/l2cap_core.c . - CVE-2022-3567: Fixed a to race condition in inet6_stream_ops/inet6_dgram_ops . - CVE-2022-41858: Fixed a denial of service in sl_tx_timeout in drivers/net/slip . - CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation . - CVE-2022-4095: Fixed a use-after-free in rtl8712 driver . - CVE-2022-3903: Fixed a denial of service with the Infrared Transceiver USB driver . - CVE-2022-45869: Fixed a race condition in the x86 KVM subsystem which could cause a denial of service . - CVE-2022-45888: Fixed a use-after-free during physical removal of a USB devices when using drivers/char/xillybus/xillyusb.c . - CVE-2022-4139: Fixed an issue with the i915 driver that allowed the GPU to access any physical memory . - CVE-2022-4129: Fixed a denial of service with the Layer 2 Tunneling Protocol . A missing lock when clearing sk_user_data can lead to a race condition and NULL pointer dereference. - CVE-2022-42896: Fixed a use-after-free vulnerability in the net/bluetooth/l2cap_core.c"s l2cap_connect and l2cap_le_connect_req which may have allowed code execution and leaking kernel memory remotely via Bluetooth . - CVE-2022-42895: Fixed an information leak in the net/bluetooth/l2cap_core.c"s l2cap_parse_conf_req which can be used to leak kernel pointers remotely . - CVE-2022-3566: Fixed a race condition in the functions tcp_getsockopt/tcp_setsockopt. The manipulation leads to a race condition . - CVE-2022-2602: Fixed a local privilege escalation vulnerability involving Unix socket Garbage Collection and io_uring . - CVE-2022-3176: Fixed a use-after-free in io_uring related to signalfd_poll and binder_poll . - CVE-2022-3707: Fixed a double free in the Intel GVT-g graphics driver . The following non-security bugs were fixed: - ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init . - ACPI: HMAT: Fix initiator registration for single-initiator systems . - ACPI: HMAT: remove unnecessary variable initialization . - ACPI: scan: Add LATT2021 to acpi_ignore_dep_ids[] . - ACPI: x86: Add another system to quirk list for forcing StorageD3Enable . - ALSA: dice: fix regression for Lexicon I-ONIX FW810S . - ALSA: hda/ca0132: add quirk for EVGA Z390 DARK . - ALSA: hda/hdmi - enable runtime pm for more AMD display audio . - ALSA: hda/realtek: Add Positivo C6300 model quirk . - ALSA: hda/realtek: Add quirk for ASUS Zenbook using CS35L41 . - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 . - ALSA: hda/realtek: fix speakers for Samsung Galaxy Book Pro . - ALSA: hda: fix potential memleak in "add_widget_node" . - ALSA: usb-audio: Add DSD support for Accuphase DAC-60 . - ALSA: usb-audio: Add quirk entry for M-Audio Micro . - ALSA: usb-audio: Drop snd_BUG_ON from snd_usbmidi_output_open . - ALSA: usb-audio: Remove redundant workaround for Roland quirk . - ALSA: usb-audio: Yet more regression for for the delayed card registration . - ALSA: usb-audio: add quirk to fix Hamedal C20 disconnect issue . - ARM: at91: rm9200: fix usb device clock id . - ARM: dts: am335x-pcm-953: Define fixed regulators in root node . - ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl . - ARM: dts: imx6q-prti6q: Fix ref/tcxo-clock-frequency properties . - ARM: dts: imx6qdl-gw59{10,13}: fix user pushbutton GPIO offset . - ARM: dts: imx7: Fix NAND controller size-cells . - ARM: mxs: fix memory leak in mxs_machine_init . - ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01 . - ASoC: Intel: sof_sdw: add quirk variant for LAPBC710 NUC15 . - ASoC: codecs: jz4725b: Fix spelling mistake "Sourc" -greater than "Source", "Routee" -greater than "Route" . - ASoC: codecs: jz4725b: add missed Line In power control bit . - ASoC: codecs: jz4725b: fix capture selector naming . - ASoC: codecs: jz4725b: fix reported volume for Master ctl . - ASoC: codecs: jz4725b: use right control for Capture Volume . - ASoC: core: Fix use-after-free in snd_soc_exit . - ASoC: fsl_asrc fsl_esai fsl_sai: allow CONFIG_PM=N . - ASoC: fsl_sai: use local device pointer . - ASoC: max98373: Add checks for devm_kcalloc . - ASoC: mt6660: Keep the pm_runtime enables before component stuff in mt6660_i2c_probe . - ASoC: ops: Fix bounds check for _sx controls . - ASoC: rt1019: Fix the TDM settings . - ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove . - ASoC: soc-pcm: Do not zero TDM masks in __soc_pcm_open . - ASoC: soc-utils: Remove __exit for snd_soc_util_exit . - ASoC: stm32: dfsdm: manage cb buffers cleanup . - ASoC: tas2764: Fix set_tdm_slot in case of single slot . - ASoC: tas2770: Fix set_tdm_slot in case of single slot . - ASoC: wm8962: Add an event handler for TEMP_HP and TEMP_SPK . - Bluetooth: 6LoWPAN: add missing hci_dev_put in get_l2cap_conn . - Bluetooth: Fix not cleanup led when bt_init fails . - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM . - Bluetooth: L2CAP: Fix attempting to access uninitialized memory . - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm . - Decrease the number of SMB3 smbdirect client SGEs . - Drivers: hv: Always reserve framebuffer region for Gen1 VMs . - Drivers: hv: Fix syntax errors in comments . - Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region . - Drivers: hv: fix repeated words in comments . - Drivers: hv: remove duplicate word in a comment . - Drivers: hv: vmbus: Accept hv_sock offers in isolated guests . - Drivers: hv: vmbus: Add VMbus IMC device to unsupported list . - Drivers: hv: vmbus: Do not wait for the ACPI device upon initialization . - Drivers: hv: vmbus: Fix kernel-doc . - Drivers: hv: vmbus: Optimize vmbus_on_event . - Drivers: hv: vmbus: Release cpu lock in error case . - Drivers: hv: vmbus: Use PCI_VENDOR_ID_MICROSOFT for better discoverability . - Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work . - Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register . - Drivers: hv: vmbus: fix typo in comment . - Fix formatting of client smbdirect RDMA logging . - HID: core: fix shift-out-of-bounds in hid_report_raw_event . - HID: hid-lg4ff: Add check for empty lbuf . - HID: hyperv: fix possible memory leak in mousevsc_probe . - HID: playstation: add initial DualSense Edge controller support . - HID: saitek: add madcatz variant of MMO7 mouse device ID . - Handle variable number of SGEs in client smbdirect send . - IB/hfi1: Correctly move list in sc_disable - IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers - Input: goodix - try resetting the controller when no config is set . - Input: i8042 - fix leaking of platform device on module removal . - Input: iforce - invert valid length check when fetching device IDs . - Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send . - Input: soc_button_array - add Acer Switch V 10 to dmi_use_low_level_irq[] . - Input: soc_button_array - add use_low_level_irq module parameter . - Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode . - KVM: Move wiping of the kvm-greater than vcpus array to common code . - KVM: SEV: Mark nested locking of vcpu-greater than lock . - KVM: SVM: Disable SEV-ES support if MMIO caching is disable . - KVM: SVM: Stuff next_rip on emulated INT3 injection if NRIPS is supported . - KVM: SVM: adjust register allocation for __svm_vcpu_run . - KVM: SVM: move guest vmsave/vmload back to assembly . - KVM: SVM: replace regs argument of __svm_vcpu_run with vcpu_svm . - KVM: SVM: retrieve VMCB from assembly . - KVM: VMX: Add helper to check if the guest PMU has PERF_GLOBAL_CTRL . - KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS . - KVM: VMX: Mark all PERF_GLOBAL__CTRL bits reserved if there"s no vPMU . - KVM: VMX: clear vmx_x86_ops.sync_pir_to_irr if APICv is disabled . - KVM: VMX: fully disable SGX if SECONDARY_EXEC_ENCLS_EXITING unavailable . - KVM: nVMX: Always enable TSC scaling for L2 when it was enabled for L1 . - KVM: nVMX: Attempt to load PERF_GLOBAL_CTRL on nVMX xfer iff it exists . - KVM: nVMX: Rename handle_vm{on,off} to handle_vmx{on,off} . - KVM: s390: Add a routine for setting userspace CPU state . - KVM: s390: Simplify SIGP Set Arch handling . - KVM: s390: pv: do not allow userspace to set the clock under PV . - KVM: s390: pv: leak the topmost page table when destroy fails . - KVM: x86/mmu: Fix wrong/misleading comments in TDP MMU fast zap . - KVM: x86/mmu: WARN if old _or_ new SPTE is REMOVED in non-atomic path . - KVM: x86/mmu: fix memoryleak in kvm_mmu_vendor_module_init . - KVM: x86/pmu: Fix and isolate TSX-specific performance event logic . - KVM: x86/pmu: Update AMD PMC sample period to fix guest NMI-watchdog . - KVM: x86/pmu: Use different raw event masks for AMD and Intel . - KVM: x86/svm: Account for family 17h event renumberings in amd_pmc_perf_hw_id . - KVM: x86: Fully initialize "struct kvm_lapic_irq" in kvm_pv_kick_cpu_op . - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest . - KVM: x86: Mask off reserved bits in CPUID.80000001H . - KVM: x86: Mask off reserved bits in CPUID.80000006H . - KVM: x86: Mask off reserved bits in CPUID.80000008H . - KVM: x86: Mask off reserved bits in CPUID.8000001AH . - KVM: x86: Report error when setting CPUID if Hyper-V allocation fails . - KVM: x86: Retry page fault if MMU reload is pending and root has no sp . - KVM: x86: Signal #GP, not -EPERM, on bad WRMSR . - KVM: x86: Treat #DBs from the emulator as fault-like . - KVM: x86: Use __try_cmpxchg_user to emulate atomic accesses . - KVM: x86: Use __try_cmpxchg_user to update guest PTE A/D bits . - KVM: x86: avoid loading a vCPU after .vm_destroy was called . - KVM: x86: emulator: em_sysexit should update ctxt-greater than mode . - KVM: x86: emulator: introduce emulator_recalc_and_set_mode . - KVM: x86: emulator: update the emulation mode after CR0 write . - KVM: x86: emulator: update the emulation mode after rsm . - KVM: x86: use a separate asm-offsets.c file . - MIPS: Loongson: Use hwmon_device_register_with_groups to register hwmon . - NFC: nci: Bounds check struct nfc_target arrays . - NFC: nci: fix memory leak in nci_rx_data_packet . - PCI: Move PCI_VENDOR_ID_MICROSOFT/PCI_DEVICE_ID_HYPERV_VIDEO definitions to pci_ids.h . - PCI: hv: Add validation for untrusted Hyper-V values . - PCI: hv: Fix the definition of vector in hv_compose_msi_msg . - RDMA/cm: Fix memory leak in ib_cm_insert_listen - RDMA/cm: Use SLID in the work completion as the DLID in responder side - RDMA/cma: Use output interface for net_dev check - RDMA/core: Fix null-ptr-deref in ib_core_cleanup - RDMA/hfi1: Prevent panic when SDMA is disabled - RDMA/hfi1: Prevent use of lock before it is initialized - RDMA/hfi1: fix potential memory leak in setup_base_ctxt - RDMA/hns: Correct the type of variables participating in the shift operation - RDMA/hns: Disable local invalidate operation - RDMA/hns: Fix incorrect clearing of interrupt status register - RDMA/hns: Fix supported page size - RDMA/hns: Fix wrong fixed value of qp-greater than rq.wqe_shift - RDMA/hns: Remove magic number - RDMA/hns: Remove the num_cqc_timer variable - RDMA/hns: Remove the num_qpc_timer variable - RDMA/hns: Remove unnecessary check for the sgid_attr when modifying QP - RDMA/hns: Replace tab with space in the right-side comments - RDMA/hns: Use hr_reg_xxx instead of remaining roce_set_xxx - RDMA/irdma: Fix deadlock in irdma_cleanup_cm_core - RDMA/irdma: Use s/g array in post send only when its valid - RDMA/mlx5: Set local port to one when accessing counters - RDMA/qedr: clean up work queue on failure in qedr_alloc_resources - RDMA/rtrs-clt: Use the right sg_cnt after ib_dma_map_sg - RDMA/rtrs-srv: Fix modinfo output for stringify - RDMA/rxe: Limit the number of calls to each tasklet - RDMA/rxe: Remove useless pkt parameters - Reduce client smbdirect max receive segment size . - SCSI: scsi_probe_lun: retry INQUIRY after timeout . - SMB3: fix lease break timeout when multiple deferred close handles for the same file . - USB: bcma: Make GPIO explicitly optional . - USB: serial: option: add Fibocom FM160 0x0111 composition . - USB: serial: option: add Sierra Wireless EM9191 . - USB: serial: option: add u-blox LARA-L6 modem . - USB: serial: option: add u-blox LARA-R6 00B modem . - USB: serial: option: remove old LARA-R6 PID . - arcnet: fix potential memory leak in com20020_probe . - arm64/syscall: Include asm/ptrace.h in syscall_wrapper header . - arm64: Add AMPERE1 to the Spectre-BHB affected list . - arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL macro - arm64: dts: imx8: correct clock order . - arm64: dts: imx8mm: Fix NAND controller size-cells . - arm64: dts: imx8mn: Fix NAND controller size-cells . - arm64: dts: juno: Add thermal critical trip points . - arm64: dts: ls1088a: specify clock frequencies for the MDIO controllers . - arm64: dts: ls208xa: specify clock frequencies for the MDIO controllers . - arm64: dts: lx2160a: specify clock frequencies for the MDIO controllers . - arm64: dts: qcom: sa8155p-adp: Specify which LDO modes are allowed . - arm64: dts: qcom: sm8150-xperia-kumano: Specify which LDO modes are allowed . - arm64: dts: qcom: sm8250-xperia-edo: Specify which LDO modes are allowed . - arm64: dts: qcom: sm8350-hdk: Specify which LDO modes are allowed . - arm64: dts: rockchip: add enable-strobe-pulldown to emmc phy on nanopi4 . - arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency . - arm64: efi: Fix handling of misaligned runtime regions and drop warning . - arm64: entry: avoid kprobe recursion . - arm64: errata: Add Cortex-A55 to the repeat tlbi list . Enable CONFIG_ARM64_ERRATUM_2441007, too - arm64: errata: Remove AES hwcap for COMPAT tasks Enable CONFIG_ARM64_ERRATUM_1742098 in arm64/default - arm64: fix rodata=full again - ata: libata-core: do not issue non-internal commands once EH is pending . - ata: libata-scsi: fix SYNCHRONIZE CACHE command failure . - ata: libata-scsi: simplify __ata_scsi_queuecmd . - ata: libata-transport: fix double ata_host_put in ata_tport_add . - ata: libata-transport: fix error handling in ata_tdev_add . - ata: libata-transport: fix error handling in ata_tlink_add . - ata: libata-transport: fix error handling in ata_tport_add . - audit: fix undefined behavior in bit shift for AUDIT_BIT . - blk-cgroup: fix missing put device in error path from blkg_conf_pref . - blk-mq: Properly init requests from blk_mq_alloc_request_hctx . - blk-mq: do not create hctx debugfs dir until q-greater than debugfs_dir is created . - blk-mq: fix io hung due to missing commit_rqs . - blk-wbt: call rq_qos_add after wb_normal is initialized . - blktrace: Trace remapped requests correctly . - block/rnbd-srv: Set keep_id to true after mutex_trylock . - block: add bio_start_io_acct_time to control start_time . - block: blk_queue_enter / __bio_queue_enter must return -EAGAIN for nowait . - block: drop unused includes in less than linux/genhd.hgreater than . - bridge: switchdev: Fix memory leaks when changing VLAN protocol . - btrfs: check if root is readonly while setting security xattr . - btrfs: do not allow compression on nodatacow files . - btrfs: export a helper for compression hard check . - btrfs: fix processing of delayed data refs during backref walking . - btrfs: fix processing of delayed tree block refs during backref walking . - btrfs: prevent subvol with swapfile from being deleted . - btrfs: send: always use the rbtree based inode ref management infrastructure . - btrfs: send: fix failures when processing inodes with no links . - btrfs: send: fix send failure of a subcase of orphan inodes . - btrfs: send: fix sending link commands for existing file paths . - btrfs: send: introduce recorded_ref_alloc and recorded_ref_free . - btrfs: send: refactor arguments of get_inode_info . - btrfs: send: remove unused found_type parameter to lookup_dir_item_inode . - btrfs: send: remove unused type parameter to iterate_inode_ref_t . - btrfs: send: use boolean types for current inode status . - bus: sunxi-rsb: Remove the shutdown callback . - bus: sunxi-rsb: Support atomic transfers . - ca8210: Fix crash by zero initializing data . - can: af_can: fix NULL pointer dereference in can_rx_register . - can: cc770: cc770_isa_probe: add missing free_cc770dev . - can: etas_es58x: es58x_init_netdev: free netdev when register_candev . - can: j1939: j1939_send_one: fix missing CAN header initialization . - can: m_can: Add check for devm_clk_get . - can: m_can: pci: add missing m_can_class_free_dev in probe/remove methods . - can: sja1000_isa: sja1000_isa_probe: add missing free_sja1000dev . - capabilities: fix potential memleak on error path from vfs_getxattr_alloc . - capabilities: fix undefined behavior in bit shift for CAP_TO_MASK . - ceph: allow ceph.dir.rctime xattr to be updatable . - ceph: avoid putting the realm twice when decoding snaps fails . - ceph: do not update snapshot context when there is no new snapshot . - ceph: fix inode reference leakage in ceph_get_snapdir . - ceph: fix memory leak in ceph_readdir when note_last_dentry returns error . - ceph: properly handle statfs on multifs setups . - ceph: switch netfs read ops to use rreq-greater than inode instead of rreq-greater than mapping-greater than host . - char: tpm: Protect tpm_pm_suspend with locks . - cifs: Add constructor/destructors for tcon-greater than cfid . - cifs: Add helper function to check smb1+ server . - cifs: Do not access tcon-greater than cfids-greater than cfid directly from is_path_accessible . - cifs: Do not use tcon-greater than cfid directly, use the cfid we get from open_cached_dir . - cifs: Fix connections leak when tlink setup failed . - cifs: Fix memory leak on the deferred close . - cifs: Fix memory leak when build ntlmssp negotiate blob failed . - cifs: Fix pages array leak when writedata alloc failed in cifs_writedata_alloc . - cifs: Fix pages leak when writedata alloc failed in cifs_write_from_iter . - cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message . - cifs: Fix wrong return value checking when GETFLAGS . - cifs: Fix xid leak in cifs_copy_file_range . - cifs: Fix xid leak in cifs_create . - cifs: Fix xid leak in cifs_flock . - cifs: Fix xid leak in cifs_get_file_info_unix . - cifs: Fix xid leak in cifs_ses_add_channel . - cifs: Make tcon contain a wrapper structure cached_fids instead of cached_fid . - cifs: Move cached-dir functions into a separate file . - cifs: Replace a couple of one-element arrays with flexible-array members . - cifs: Use after free in debug code . - cifs: Use help macro to get the header preamble size . - cifs: Use help macro to get the mid header size . - cifs: add check for returning value of SMB2_close_init . - cifs: add check for returning value of SMB2_set_info_init . - cifs: add missing spinlock around tcon refcount . - cifs: alloc_mid function should be marked as static . - cifs: always initialize struct msghdr smb_msg completely . - cifs: always iterate smb sessions using primary channel . - cifs: avoid deadlocks while updating iface . - cifs: avoid unnecessary iteration of tcp sessions . - cifs: avoid use of global locks for high contention data . - cifs: cache the dirents for entries in a cached directory . - cifs: change iface_list from array to sorted linked list . - cifs: destage dirty pages before re-reading them for cache=none . - cifs: do not send down the destination address to sendmsg for a SOCK_STREAM . - cifs: drop the lease for cached directories on rmdir or rename . - cifs: during reconnect, update interface if necessary . - cifs: enable caching of directories for which a lease is held . - cifs: find and use the dentry for cached non-root directories also . - cifs: fix double-fault crash during ntlmssp . - cifs: fix lock length calculation . - cifs: fix memory leaks in session setup . - cifs: fix missing unlock in cifs_file_copychunk_range . - cifs: fix race condition with delayed threads . - cifs: fix skipping to incorrect offset in emit_cached_dirents . - cifs: fix small mempool leak in SMB2_negotiate . - cifs: fix static checker warning . - cifs: fix uninitialised var in smb2_compound_op . - cifs: fix use-after-free caused by invalid pointer `hostname` . - cifs: fix use-after-free on the link name . - cifs: fix wrong unlock before return from cifs_tree_connect . - cifs: improve handlecaching . - cifs: improve symlink handling for smb2+ . - cifs: lease key is uninitialized in smb1 paths . - cifs: lease key is uninitialized in two additional functions when smb1 . - cifs: list_for_each -greater than list_for_each_entry . - cifs: misc: fix spelling typo in comment . - cifs: move from strlcpy with unused retval to strscpy . - cifs: periodically query network interfaces from server . - cifs: populate empty hostnames for extra channels . - cifs: prevent copying past input buffer boundaries . - cifs: remove "cifs_" prefix from init/destroy mids functions . - cifs: remove initialization value . - cifs: remove minor build warning . - cifs: remove redundant initialization to variable mnt_sign_enabled . - cifs: remove remaining build warnings . - cifs: remove some camelCase and also some static build warnings . - cifs: remove unnecessary conversions . - cifs: remove unnecessary locking of chan_lock while freeing session . - cifs: remove unnecessary type castings . - cifs: remove unused server parameter from calc_smb_size . - cifs: remove useless DeleteMidQEntry . - cifs: remove useless parameter "is_fsctl" from SMB2_ioctl . - cifs: replace kfree with kfree_sensitive for sensitive data . - cifs: return correct error in -greater than calc_signature . - cifs: return errors during session setup during reconnects . - cifs: revalidate mapping when doing direct writes . - cifs: secmech: use shash_desc directly, remove sdesc . - cifs: set rc to -ENOENT if we can not get a dentry for the cached dir . - cifs: skip extra NULL byte in filenames . - cifs: store a pointer to a fid in the cfid structure instead of the struct . - cifs: truncate the inode and mapping when we simulate fcollapse . - cifs: update cifs_ses::ip_addr after failover . - cifs: update internal module number . - cifs: use ALIGN and round_up macros . - cifs: use LIST_HEAD and list_move to simplify code . - cifs: when a channel is not found for server, log its connection id . - cifs: when insecure legacy is disabled shrink amount of SMB1 code . - clocksource/drivers/hyperv: add data structure for reference TSC MSR . - cpufreq: intel_pstate: Handle no_turbo in frequency invariance . - cpufreq: intel_pstate: Support Sapphire Rapids OOB mode . - cpuidle: intel_idle: Drop redundant backslash at line end . - dm btree remove: fix use after free in rebalance_children . - dm crypt: make printing of the key constant-time . - dm era: commit metadata in postsuspend after worker stops . - dm integrity: fix memory corruption when tag_size is less than digest size . - dm mirror log: clear log bits up to BITS_PER_LONG boundary . - dm raid: fix accesses beyond end of raid member array . - dm stats: add cond_resched when looping over entries . - dm thin: fix use-after-free crash in dm_sm_register_threshold_callback . - dm: fix double accounting of flush with data . - dm: interlock pending dm_io and dm_wait_for_bios_completion . - dm: properly fix redundant bio-based IO accounting . - dm: remove unnecessary assignment statement in alloc_dev . - dm: return early from dm_pr_call if DM device is suspended . - dm: revert partial fix for redundant bio-based IO accounting . - dma-buf: fix racing conflict of dma_heap_add . - dmaengine: at_hdmac: Check return code of dma_async_device_register . - dmaengine: at_hdmac: Do not allow CPU to reorder channel enable . - dmaengine: at_hdmac: Do not call the complete callback on device_terminate_all . - dmaengine: at_hdmac: Do not start transactions at tx_submit level . - dmaengine: at_hdmac: Fix at_lli struct definition . - dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors . - dmaengine: at_hdmac: Fix concurrency over descriptor . - dmaengine: at_hdmac: Fix concurrency over the active list . - dmaengine: at_hdmac: Fix concurrency problems by removing atc_complete_all . - dmaengine: at_hdmac: Fix descriptor handling when issuing it to hardware . - dmaengine: at_hdmac: Fix impossible condition . - dmaengine: at_hdmac: Fix premature completion of desc in issue_pending . - dmaengine: at_hdmac: Free the memset buf without holding the chan lock . - dmaengine: at_hdmac: Protect atchan-greater than status with the channel lock . - dmaengine: at_hdmac: Start transfer for cyclic channels in issue_pending . - dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove . - dmaengine: pxa_dma: use platform_get_irq_optional . - dmaengine: ti: k3-udma-glue: fix memory leak when register device fail . - docs, kprobes: Fix the wrong location of Kprobes . - docs/core-api: expand Fedora instructions for GCC plugins . - drm/amd/display: Add HUBP surface flip interrupt handler . - drm/amdgpu: disable BACO on special BEIGE_GOBY card . - drm/amdkfd: Fix NULL pointer dereference in svm_migrate_to_ram . - drm/amdkfd: Migrate in CPU page fault use current mm . - drm/amdkfd: avoid recursive lock in migrations back to RAM . - drm/amdkfd: handle CPU fault on COW mapping . - drm/drv: Fix potential memory leak in drm_dev_init . - drm/hyperv: Add ratelimit on error message . - drm/hyperv: Do not overwrite dirt_needed value set by host . - drm/i915/dmabuf: fix sg_table handling in map_dma_buf . - drm/i915/sdvo: Filter out invalid outputs more sensibly . - drm/i915/sdvo: Setup DDC fully before output init . - drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid . - drm/msm/hdmi: Remove spurious IRQF_ONESHOT flag . - drm/msm/hdmi: fix IRQ lifetime . - drm/panel: simple: set bpc field for logic technologies displays . - drm/rockchip: dsi: Force synchronous probe . - drm/vc4: Fix missing platform_unregister_drivers call in vc4_drm_register . - drm/vc4: kms: Fix IS_ERR vs NULL check for vc4_kms . - drm: Fix potential null-ptr-deref in drm_vblank_destroy_worker . - dt-bindings: power: gpcv2: add power-domains property . - e1000e: Fix TX dispatch condition . - e100: Fix possible use after free in e100_xmit_prepare . - efi/tpm: Pass correct address to memblock_reserve . - efi: random: Use "ACPI reclaim" memory for random seed . - efi: random: reduce seed size to 32 bytes . - firmware: arm_scmi: Make Rx chan_setup fail on memory errors . - firmware: arm_scmi: Suppress the driver"s bind attributes . - firmware: coreboot: Register bus in module init . - fm10k: Fix error handling in fm10k_init_module . - ftrace: Fix null pointer dereference in ftrace_add_mod . - ftrace: Fix the possible incorrect kernel message . - ftrace: Fix use-after-free for dynamic ftrace_ops . - ftrace: Optimize the allocation for mcount entries . - fuse: add file_modified to fallocate . - fuse: fix readdir cache race . - gpio: amd8111: Fix PCI device reference count leak . - hamradio: fix issue of dev reference count leakage in bpq_device_event . - hv_netvsc: Fix potential dereference of NULL pointer . - hv_netvsc: Fix race between VF offering and VF association message from host . - hv_netvsc: Print value of invalid ID in netvsc_send_{completion,tx_complete} . - hv_sock: Add validation for untrusted Hyper-V values . - hv_sock: Check hv_pkt_iter_first_raw"s return value . - hv_sock: Copy packets sent by Hyper-V out of the ring buffer . - hwmon: Check for null before removing sysfs attrs . - hwmon: fix pci device refcount leak in nv1a_ram_new . - hwmon: fix missing pci_disable_device . - hwmon: Fix possible UAF when ibmpex_register_bmc fails . - hwmon: Fix shunt sum critical calculation . - hwmon: fix temperature scaling . - i2c: i801: add lis3lv02d"s I2C address for Vostro 5568 . - i2c: imx: Only DMA messages with I2C_M_DMA_SAFE flag set . - i2c: npcm7xx: Fix error handling in npcm_i2c_init . - i2c: piix4: Fix adapter not be removed in piix4_remove . - i2c: tegra: Allocate DMA memory for DMA engine . - i2c: xiic: Add platform module alias . - ibmvnic: Free rwi on reset success . - ieee802154: cc2520: Fix error return code in cc2520_hw_init . - iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger . - iio: adc: mp2629: fix potential array out of bound access . - iio: adc: mp2629: fix wrong comparison of channel . - iio: core: Fix entry not deleted when iio_register_sw_trigger_type fails . - iio: health: afe4403: Fix oob read in afe4403_read_raw . - iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw . - iio: light: apds9960: fix wrong register for gesture gain . - iio: light: rpr0521: add missing Kconfig dependencies . - iio: ms5611: Simplify IO callback parameters . - iio: pressure: ms5611: changed hardcoded SPI speed to value limited . - iio: pressure: ms5611: fixed value compensation bug . - iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init . - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash . - intel_idle: Add AlderLake support . - intel_idle: Fix SPR C6 optimization . - intel_idle: Fix the "preferred_cstates" module parameter . - intel_idle: make SPR C1 and C1E be independent . - io-wq: Remove duplicate code in io_workqueue_create . - io-wq: do not retry task_work creation failure on fatal conditions . - io-wq: ensure we exit if thread group is exiting . - io-wq: exclusively gate signal based exit on get_signal return . - io-wq: fix cancellation on create-worker failure . - io-wq: fix silly logic error in io_task_work_match . - io_uring: correct __must_hold annotation . - io_uring: drop ctx-greater than uring_lock before acquiring sqd-greater than lock . - io_uring: ensure IORING_REGISTER_IOWQ_MAX_WORKERS works with SQPOLL . - io_uring: fix io_timeout_remove locking . - io_uring: fix missing mb before waitqueue_active . - io_uring: fix missing sigmask restore in io_cqring_wait . - io_uring: fix possible poll event lost in multi shot mode . - io_uring: pin SQPOLL data before unlocking ring lock . - ipv6: ping: fix wrong checksum for large frames . - kABI: Fix kABI after "KVM: x86/pmu: Use different raw event masks for AMD and Intel" . - kbuild: Unify options for BTF generation for vmlinux and modules . - kexec: turn all kexec_mutex acquisitions into trylocks . - mISDN: fix misuse of put_device in mISDN_register_device . - mISDN: fix possible memory leak in mISDN_dsp_element_register . - mac80211: radiotap: Use BIT instead of shifts . - mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add . - macsec: Fix invalid error code set . - macsec: add missing attribute validation for offload . - macsec: clear encryption keys from the stack after setting up offload . - macsec: delete new rxsc when offload fails . - macsec: fix detection of RXSCs when toggling offloading . - macsec: fix secy-greater than n_rx_sc accounting . - md/raid5: Ensure stripe_fill happens on non-read IO with journal . - md/raid5: Remove unnecessary bio_put in raid5_read_one_chunk . - md: Replace snprintf with scnprintf . - media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE . - media: dvb-frontends/drxk: initialize err to 0 . - media: meson: vdec: fix possible refcount leak in vdec_probe . - media: rkisp1: Do not pass the quantization to rkisp1_csm_config . - media: rkisp1: Initialize color space on resizer sink and source pads . - media: rkisp1: Use correct macro for gradient registers . - media: rkisp1: Zero v4l2_subdev_format fields in when validating links . - media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE . - media: v4l: subdev: Fail graciously when getting try data for NULL state . - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram . - mmc: core: Fix ambiguous TRIM and DISCARD arg . - mmc: core: properly select voltage range without power cycle . - mmc: cqhci: Provide helper for resetting both SDHCI and CQHCI . - mmc: mmc_test: Fix removal of debugfs file . - mmc: sdhci-brcmstb: Enable Clock Gating to save power . - mmc: sdhci-brcmstb: Fix SDHCI_RESET_ALL for CQHCI . - mmc: sdhci-brcmstb: Re-organize flags . - mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check . - mmc: sdhci-esdhc-imx: use the correct host caps for MMC_CAP_8_BIT_DATA . - mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI . - mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout . - mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put . - mmc: sdhci-sprd: Fix no reset data and command after voltage switch . - mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI . - mmc: sdhci_am654: Fix SDHCI_RESET_ALL for CQHCI . - mms: sdhci-esdhc-imx: Fix SDHCI_RESET_ALL for CQHCI . - mtd: parsers: bcm47xxpart: Fix halfblock reads . - mtd: parsers: bcm47xxpart: print correct offset on read error . - mtd: spi-nor: intel-spi: Disable write protection only if asked . - nbd: Fix incorrect error handle when first_minor is illegal in nbd_dev_add . - net/smc: Avoid overwriting the copies of clcsock callback functions . - net/smc: Fix an error code in smc_lgr_create . - net/smc: Fix possible access to freed memory in link clear . - net/smc: Fix possible leaked pernet namespace in smc_init . - net/smc: Fix slab-out-of-bounds issue in fallback . - net/smc: Fix sock leak when release after smc_shutdown . - net/smc: Forward wakeup to smc socket waitqueue after fallback . - net/smc: Only save the original clcsock callback functions . - net/smc: Send directly when TCP_CORK is cleared . - net/smc: kABI workarounds for struct smc_link . - net/smc: kABI workarounds for struct smc_sock . - net/smc: send directly on setting TCP_NODELAY . - net/x25: Fix skb leak in x25_lapb_receive_frame . - net: ethernet: nixge: fix NULL dereference . - net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed . - net: ethernet: ti: am65-cpsw: fix error handling in am65_cpsw_nuss_probe . - net: hyperv: remove use of bpf_op_t . - net: mdio: fix unbalanced fwnode reference count in mdio_device_release . - net: mdiobus: fix unbalanced node reference count . - net: phy: fix null-ptr-deref while probe failed . - net: phy: marvell: add sleep time after enabling the loopback bit . - net: phy: mscc: macsec: clear encryption keys when freeing a flow . - net: smsc95xx: add support for Microchip EVB-LAN8670-USB . - net: stmmac: work around sporadic tx issue on link-up . - net: thunderbolt: Fix error handling in tbnet_init . - net: thunderbolt: fix memory leak in tbnet_open . - net: thunderx: Fix the ACPI memory leak . - net: usb: qmi_wwan: add Telit 0x103a composition . - net: wwan: iosm: fix dma_alloc_coherent incompatible pointer type . - net: wwan: iosm: fix kernel test robot reported error . - nfc/nci: fix race with opening and closing . - nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send . - nfc: nxp-nci: Fix potential memory leak in nxp_nci_send . - nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send . - nfc: st-nci: fix incorrect sizing calculations in EVT_TRANSACTION . - nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION . - nfc: st-nci: fix memory leaks in EVT_TRANSACTION . - nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry . - nilfs2: fix deadlock in nilfs_count_free_blocks . - nilfs2: fix nilfs_sufile_mark_dirty not set segment usage as dirty . - nilfs2: fix use-after-free bug of ns_writer on remount . - nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure . - panic, kexec: make __crash_kexec NMI safe . - parport_pc: Avoid FIFO port location truncation . - phy: ralink: mt7621-pci: add sentinel to quirks table . - phy: stm32: fix an error code in probe . - pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map . - pinctrl: intel: Save and restore pins in "direct IRQ" mode . - pinctrl: rockchip: list all pins in a possible mux route for PX30 . - pinctrl: single: Fix potential division by zero . - platform/surface: aggregator: Do not check for repeated unsequenced packets . - platform/x86/intel/pmt: Sapphire Rapids PMT errata fix . - platform/x86/intel: hid: add quirk to support Surface Go 3 . - platform/x86/intel: pmc: Do not unconditionally attach Intel PMC when virtualized . - platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 . - platform/x86: asus-wmi: add missing pci_dev_put in asus_wmi_set_xusb2pr . - platform/x86: hp-wmi: Ignore Smart Experience App event . - platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi . - platform/x86: ideapad-laptop: Disable touchpad_switch . - platform/x86: touchscreen_dmi: Add info for the RCA Cambio W101 v2 2-in-1 . - powerpc/64: Fix build failure with allyesconfig in book3s_64_entry.S . - powerpc/boot: Explicitly disable usage of SPE instructions . - powerpc/kvm: Fix kvm_use_magic_page . - powerpc/pseries/vas: Declare pseries_vas_fault_thread_fn as static . - proc: avoid integer type confusion in get_proc_long . - proc: proc_skip_spaces shouldn"t think it is working on C strings . - rbd: fix possible memory leak in rbd_sysfs_init . - regulator: core: fix UAF in destroy_regulator . - regulator: core: fix kobject release warning and memory leak in regulator_register . - regulator: twl6030: re-add TWL6032_SUBCLASS . - ring-buffer: Include dropped pages in counting dirty patches . - ring_buffer: Do not deactivate non-existant pages . - s390/futex: add missing EX_TABLE entry to __futex_atomic_op . - s390/pci: add missing EX_TABLE entries to __pcistg_mio_inuser/__pcilg_mio_inuser . - s390/uaccess: add missing EX_TABLE entries to __clear_user, copy_in_user_mvcos, copy_in_user_mvc, clear_user_xc and __strnlen_user . - s390: fix nospec table alignments . - sched: Clear ttwu_pending after enqueue_task . - sched: Disable sched domain debugfs creation on ppc64 unless sched_verbose is specified . - scripts/faddr2line: Fix regression in name resolution on ppc64le . - scsi: ibmvfc: Avoid path failures during live migration . - scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024 . - scsi: megaraid_sas: Correct value passed to scsi_device_lookup . - scsi: mpt3sas: Fix return value check of dma_get_required_mask . - scsi: qedf: Populate sysfs attributes for vport . - scsi: scsi_transport_sas: Fix error handling in sas_phy_add . - scsi: storvsc: Drop DID_TARGET_FAILURE use . - scsi: storvsc: Fix handling of srb_status and capacity change events . - scsi: storvsc: Fix typo in comment . - scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq . - scsi: storvsc: remove an extraneous "to" in a comment . - scsi: zfcp: Fix double free of FSF request when qdio send fails . - selftests/intel_pstate: fix build for ARCH=x86_64 . - selftests: mptcp: fix mibit vs mbit mix up . - selftests: mptcp: make sendfile selftest work . - selftests: mptcp: more stable simult_flows tests . - selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload . - serial: 8250: 8250_omap: Avoid RS485 RTS glitch on -greater than set_termios . - serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs . - serial: 8250: Flush DMA Rx on RLSI . - serial: 8250: omap: Fix unpaired pm_runtime_put_sync in omap8250_remove . - serial: 8250: omap: Flush PM QOS work on remove . - serial: 8250_lpss: Configure DMA also w/o DMA filter . - serial: 8250_omap: remove wait loop from Errata i202 workaround . - serial: imx: Add missing .thaw_noirq hook . - siox: fix possible memory leak in siox_device_add . - slimbus: stream: correct presence rate frequencies . - smb2: small refactor in smb2_check_message . - smb3: Move the flush out of smb2_copychunk_range into its callers . - smb3: add dynamic trace points for tree disconnect . - smb3: add trace point for SMB2_set_eof . - smb3: allow deferred close timeout to be configurable . - smb3: check xattr value length earlier . - smb3: clarify multichannel warning . - smb3: do not log confusing message when server returns no network interfaces . - smb3: fix empty netname context on secondary channels . - smb3: fix oops in calculating shash_setkey . - smb3: fix temporary data corruption in collapse range . - smb3: fix temporary data corruption in insert range . - smb3: improve SMB3 change notification support . - smb3: interface count displayed incorrectly . - smb3: missing inode locks in punch hole . - smb3: missing inode locks in zero range . - smb3: must initialize two ACL struct fields to zero . - smb3: remove unneeded null check in cifs_readdir . - smb3: rename encryption/decryption TFMs . - smb3: use filemap_write_and_wait_range instead of filemap_write_and_wait . - smb3: use netname when available on secondary channels . - smb3: workaround negprot bug in some Samba servers . - soc: imx8m: Enable OCOTP clock before reading the register . - soundwire: intel: Initialize clock stop timeout . - soundwire: qcom: check for outanding writes before doing a read . - soundwire: qcom: reinit broadcast completion . - speakup: fix a segfault caused by switching consoles . - spi: dw-dma: decrease reference count in dw_spi_dma_init_mfld . - spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock . - spi: stm32: Print summary "callbacks suppressed" message . - spi: stm32: fix stm32_spi_prepare_mbr that halves spi clk for every run . - spi: tegra210-quad: Fix duplicate resource error . - thunderbolt: Add DP OUT resource when DP tunnel is discovered . - tools: hv: Remove an extraneous "the" . - tools: hv: kvp: remove unnecessary conversions . - tools: iio: iio_generic_buffer: Fix read size . - tracing/ring-buffer: Have polling block on watermark . - tracing: Fix memory leak in test_gen_synth_cmd and test_empty_synth_event . - tracing: Fix memory leak in tracing_read_pipe . - tracing: Fix wild-memory-access in register_synth_event . - tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd . - tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit . - tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in kprobe_event_gen_test_exit . - tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send . - tty: serial: fsl_lpuart: do not break the on-going transfer when global reset . - usb: add NO_LPM quirk for Realforce 87U Keyboard . - usb: cdns3: host: fix endless superspeed hub port reset . - usb: cdnsp: Fix issue with Clear Feature Halt Endpoint . - usb: cdnsp: fix issue with ZLP - added TD_SIZE = 1 . - usb: chipidea: fix deadlock in ci_otg_del_timer . - usb: dwc3: exynos: Fix remove function . - usb: dwc3: gadget: Clear ep descriptor last . - usb: dwc3: gadget: Return -ESHUTDOWN on ep disable . - usb: dwc3: gadget: conditionally remove requests . - usb: smsc: use eth_hw_addr_set . - usb: typec: mux: Enter safe mode only when pins need to be reconfigured . - usb: xhci-mtk: check boundary before check tt . - usb: xhci-mtk: update fs bus bandwidth by bw_budget_table . - usbnet: smsc95xx: Do not reset PHY behind PHY driver"s back . - v3 of "PCI: hv: Only reuse existing IRTE allocation for Multi-MSI" - video/fbdev/stifb: Implement the stifb_fillrect function . - virtio-blk: Use blk_validate_block_size to validate block size . - vmxnet3: correctly report encapsulated LRO packet . - vmxnet3: use correct intrConf reference when using extended queues . - wifi: airo: do not assign -1 to unsigned char . - wifi: ath11k: Fix QCN9074 firmware boot on x86 . - wifi: ath11k: avoid deadlock during regulatory update in ath11k_regd_update . - wifi: cfg80211: do not allow multi-BSSID in S1G . - wifi: cfg80211: fix buffer overflow in elem comparison . - wifi: cfg80211: fix memory leak in query_regdb_file . - wifi: cfg80211: silence a sparse RCU warning . - wifi: mac80211: Fix ack frame idr leak when mesh has no route . - wifi: mac80211: fix memory free error when registering wiphy fail . - wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support . - wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration . - wifi: wext: use flex array destination for memcpy . - wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute . - wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute . - wifi: wilc1000: validate number of channels . - wifi: wilc1000: validate pairwise and authentication suite offsets . - x86/Xen: streamline PV CPU enumeration . - x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3 . - x86/cpu: Restore AMD"s DE_CFG MSR after resume . - x86/entry: Work around Clang __bdos bug . - x86/extable: Extend extable functionality . - x86/fpu: Drop fpregs lock before inheriting FPU permissions . - x86/futex: Remove .fixup usage . - x86/hyperv: Disable hardlockup detector by default in Hyper-V guests . - x86/hyperv: Fix "struct hv_enlightened_vmcs" definition . - x86/hyperv: Update "struct hv_enlightened_vmcs" definition . - x86/hyperv: fix invalid writes to MSRs during root partition kexec . - x86/kexec: Fix double-free of elf header buffer . - x86/microcode/AMD: Apply the patch early on every logical thread . - x86/uaccess: Implement macros for CMPXCHG on user addresses . - xen/gntdev: Accommodate VMA splitting . - xen/pcpu: fix possible memory leak in register_pcpu . - xen: delay xen_hvm_init_time_ops if kdump is boot on vcpugreater than =32 . - xfs: convert XLOG_FORCED_SHUTDOWN to xlog_is_shutdown . - xfs: fix perag reference leak on iteration race with growfs . - xfs: fix xfs_ifree error handling to not leak perag ref . - xfs: reserve quota for dir expansion when linking/unlinking files . - xfs: reserve quota for target dir expansion when renaming files . Special Instructions and Notes: Please reboot the system after installing this update.